
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
File: haTP570qMmoqBWITY5e3zK5eW3w.mft (raw, json)
Hash identifier: gEFbJCMKPnKNDRn61/QySQuP+HBrzuYM+zZSaVjl52g=
Subject key identifier: 3A:C0:B7:19:41:F8:C5:E6:B5:81:61:3E:30:D0:A1:F6:99:1A:87:18
Authority key identifier: 85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
Certificate issuer: /CN=A912B666/serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
Manifest number: 85
Signing time: Sat 11 Jul 2026 08:41:32 +0000
Manifest this update: Sat 11 Jul 2026 08:41:32 +0000
Manifest next update: Sat 18 Jul 2026 08:41:32 +0000
Files and hashes: 1: haTP570qMmoqBWITY5e3zK5eW3w.crl (hash: eDNnYReptKpqLl9NL4C0hEIruH8bIaTLrcBoK6PkfOo=)
2: EE9FEF746EC411F198B3A32068A30FBC.roa (hash: 2tzDgSkB399hYZeTSxJR/xvSzXSmkIZZcCoRKC4gjsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 08:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=85A4CFE7BD2A326A2A0562136397B7CCAE5E5B7C
Validity
Not Before: Jul 11 08:41:32 2026 GMT
Not After : Jul 18 08:41:32 2026 GMT
Subject: CN=6a5201bc-4214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:26:cc:d3:f0:61:8a:4b:e8:a5:da:6b:93:
95:b6:db:c1:dd:a2:72:52:40:d9:88:a7:58:46:26:
73:b8:41:d2:55:20:48:6a:19:24:51:15:b4:0b:e8:
58:32:d5:14:b8:09:6a:5d:51:36:da:82:09:76:1c:
e8:01:6b:38:8c:bd:0c:10:6f:dc:48:56:95:10:09:
74:f7:ed:74:60:29:3b:88:dd:a0:50:0f:e3:c2:f0:
27:6f:b4:00:89:ae:83:32:ff:c3:8b:e1:f9:a1:3d:
92:b4:02:8b:b5:37:d1:81:f1:ea:c9:e2:64:44:2f:
4c:6e:f9:7a:0e:a4:e4:37:97:c0:33:2e:88:44:5c:
33:14:6a:eb:cc:8d:98:a9:5e:86:3c:b3:a9:78:d1:
88:4b:93:c9:cc:e3:1d:44:1b:52:d6:d6:23:56:07:
7f:fe:bd:10:bb:71:c2:c9:4d:29:7c:a7:ef:1e:90:
00:26:0d:98:a0:23:4d:a1:de:f6:0c:60:ef:fb:69:
76:88:8d:e3:cc:8b:22:4b:7d:60:e0:cd:14:dd:8a:
10:35:c5:fc:8a:fd:be:dd:60:25:fb:3d:47:f4:1e:
34:59:79:57:33:fc:1b:d0:26:dd:cc:7e:2b:43:6c:
91:67:85:d4:de:23:2b:e5:06:d7:b1:cc:56:f7:18:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:B7:19:41:F8:C5:E6:B5:81:61:3E:30:D0:A1:F6:99:1A:87:18
X509v3 Authority Key Identifier:
keyid:85:A4:CF:E7:BD:2A:32:6A:2A:05:62:13:63:97:B7:CC:AE:5E:5B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/haTP570qMmoqBWITY5e3zK5eW3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/905BFEF8C92911F0809CF281C4F9AE02/haTP570qMmoqBWITY5e3zK5eW3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b4:2c:49:55:1f:d6:0b:6b:d1:23:e6:0f:bd:16:a4:e3:75:
33:99:37:b6:b1:12:f0:a7:b3:8e:34:19:53:15:7d:be:39:fd:
1d:fe:fc:91:8a:ca:18:20:05:5c:cc:87:de:1e:76:77:ce:c8:
f5:5d:d0:22:bf:a2:dd:6d:bf:6d:dd:6b:ea:0b:21:02:12:17:
4e:f2:87:3d:93:55:39:cf:b8:69:af:b0:2b:29:be:a8:74:07:
37:0a:5f:9a:1c:24:0b:d9:50:91:c8:01:09:46:ad:a7:3f:e7:
5d:a0:78:d5:f1:c0:86:06:83:66:09:a9:6a:b6:0f:d2:12:da:
d0:54:1a:c5:81:f3:30:cb:75:ad:22:a3:dd:fb:04:e5:9a:92:
46:5c:68:f1:38:29:eb:ab:ad:f4:b2:5d:2c:19:fe:48:79:1c:
89:be:6e:a7:01:e9:06:5a:b1:19:09:c8:1c:49:a7:1e:0d:97:
46:da:7e:76:e3:24:40:40:01:95:ec:8b:1a:cb:b0:05:6c:1e:
e5:11:5c:de:e3:6c:2e:c5:24:7d:97:ab:16:c6:f6:e3:ab:11:
67:fc:18:c6:f2:fd:9a:cd:42:75:d4:33:f6:3e:2e:2d:c9:75:
bb:34:21:b3:f8:99:34:b2:5f:1c:52:cb:53:19:5c:cc:48:de:
95:cb:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 02:15:51 2026 by rpki-client